IP Library › Granted Patent US 9,536,100
Granted Patent B2
US 9,536,100 · App. 13/977,416 · Granted Jan 3, 2017

Scalable secure execution

Inventors: Vinay Phegade (Beaverton, OR); Sanjay Bakshi (Portland, OR)
Assignee: Intel Corporation
G06F21/606G06F9/54H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,536,100
App. No.
13/977,416
Granted
Jan 3, 2017
Kind
B2
Abstract

In one embodiment a controller comprises logic configured to establish a pairing with a remote processor in a second electronic device, create a first secure communication channel with the remote processor, transmit a first portion of a processing task to the remote processor via the first secure channel, receive, via a second communication channel, an input from the first portion of the processing task, and complete at least a second portion of the processing task using the input. Other embodiments may be described.

Claims (57)

1. A controller for a first electronic device comprising:

processing circuitry defining logic configured to:

establish a pairing with a remote processor in a second electronic device;

create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;

generate a confirmation code;

transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;

receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;

present the bitmap on a display module coupled to the controller;

receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and

initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

2. The controller of claim 1 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

3. The controller of claim 1 , further comprising a local processor coupled to the controller, and wherein the local processor comprises logic configured to:

receive, from the remote processor, an output of the first portion of the processing task; and

present the output on a display coupled to the local controller.

4. The controller of claim 3 , wherein the local processor further comprises logic configured to:

receive an input from an input device; and

pass the input to the controller.

5. The controller of claim 1 , further comprising logic configured to validate the input.

6. An electronic device, comprising:

a processor which is to implement an untrusted computing environment; and

a controller, comprising:

processing circuitry defining logic configured to:

establish a pairing with a remote processor in a second electronic device;

create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;

generate a confirmation code;

transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;

receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;

present the bitmap on a display module coupled to the controller;

receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and

initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

7. The electronic device of claim 6 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

8. The electronic device of claim 6 , further comprising a local processor coupled to the controller, and wherein the local processor comprises logic configured to: receive, from the remote processor, an output of the first portion of the processing task; and present the output on a display coupled to the local controller.

9. The electronic device of claim 8 , wherein the local processor further comprises logic configured to:

receive an input from an input device; and

pass the input to the controller.

10. The electronic device of claim 6 , further comprising logic configured to validate the input.

11. A method, comprising:

establishing a pairing between a controller in a first electronic device and a remote processor in a second electronic device;

creating a first communication channel between the controller and the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;

generating a confirmation code;

transmitting the confirmation code and a confirmation page to the remote processor via the first secure channel;

receiving, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input; presenting the bitmap on a display module coupled to the controller;

receiving a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and

initiating a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

12. The method of claim 11 , further comprising adding a confirmation code to the first portion of the processing task.

13. The method of claim 11 , further comprising: receiving, in the local processor, an input from an input device; and passing the input from the local processor to the controller.

14. The method of claim 11 , further comprising validating the input.

15. A computer program product comprising logic instructions stored on non-transitory computer readable medium which, when executed by a controller, configure the controller to:

establish a pairing with a remote processor in a second electronic device;

create a first secure communication channel with the remote processor, wherein the first secure communication channel is secured at least in part by a shared secret developed between the controller and the remote device;

generate a confirmation code;

transmit the confirmation code and a confirmation page to the remote processor via the first secure channel;

receive, via a second communication channel, a bitmap for a login screen, wherein the bitmap is encrypted using the shared secret and comprises one or more coordinates for user input;

present the bitmap on a display module coupled to the controller;

receive a login input from the display module at a location corresponding to the one or more coordinates on the bitmap; and

initiate a communication session between the controller and a remote device when the login input received from the display module indicates that the login is authorized.

16. The computer program product of claim 15 , wherein the logic comprises a near field wireless communication interface to communicate with the remote processor.

Continuity (1)
Related Publication 20150143543A1 · May 21, 2015